Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
File:                     3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer (raw, json)
Hash identifier:          9M5wVy1A7Q5vmDUa9ZCz+MdvH4GbxbBEIRPtOgjXTUQ=
Subject key identifier:   DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC42506631D7CDC83F0A84015DBC3EEC0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 08:30:10 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 30758
                          AS: 50540
                          AS: 59887
                          AS: 62077
                          AS: 62095
                          IP: 185.48.24.0/22
                          IP: 2a04:b140::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:25:06:63:1d:7c:dc:83:f0:a8:40:15:db:c3:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:30:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:77:98:d1:44:61:b3:00:21:8e:9a:5c:f8:
                    e3:20:05:77:06:aa:0d:6a:f8:75:e0:14:3a:9c:f7:
                    73:1b:e3:f3:62:c2:30:1e:9a:1d:08:a5:52:f5:aa:
                    96:f9:c2:54:0e:b9:b9:c9:e2:11:ca:e4:f6:55:a2:
                    94:1a:0e:ef:f6:31:7f:5b:0a:a2:51:e6:bc:fc:18:
                    04:b4:13:78:35:33:a7:80:2f:dc:b1:82:50:65:21:
                    30:cf:7c:16:48:04:42:05:85:8e:85:0b:d4:6a:9f:
                    0f:a6:f9:4e:7d:4d:61:cc:ab:14:b9:6e:8d:1c:ef:
                    fd:a9:52:97:67:70:63:c6:0b:58:ad:7b:bc:5d:0e:
                    b5:4e:c1:ee:1f:c7:48:67:b5:5d:d8:26:fa:6b:4b:
                    af:ea:68:3f:18:8b:37:0b:42:f0:fd:e2:a3:e3:d5:
                    2f:d4:95:2b:89:72:5d:e8:a2:e7:c5:2c:f4:a8:1b:
                    54:3c:e5:1c:7e:5a:01:42:dc:22:09:8d:c2:de:6f:
                    c8:a7:df:f7:7c:37:de:ed:8e:d7:49:69:47:59:42:
                    b0:e5:d3:24:54:d7:c4:01:11:fe:df:a6:24:4b:7a:
                    ca:7a:34:2b:f5:19:50:ad:9f:4a:ec:17:5c:40:8f:
                    28:9d:1d:08:88:a0:d1:80:3a:2d:25:c1:df:5e:1b:
                    4b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.48.24.0/22
                IPv6:
                  2a04:b140::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30758
                  50540
                  59887
                  62077
                  62095

    Signature Algorithm: sha256WithRSAEncryption
         18:76:b8:fa:39:2e:f6:96:08:75:3f:b7:e1:45:16:74:14:c6:
         e6:e2:a1:2d:2d:19:3b:a9:1e:2e:23:8d:e1:79:66:08:7e:da:
         27:37:4c:d2:73:2a:73:6b:10:33:f2:45:33:3d:fb:87:5d:e2:
         a9:b9:7e:21:ee:29:1c:61:68:3d:94:26:ba:6c:d1:e3:25:74:
         6f:49:60:56:93:2c:80:78:ca:1a:16:0f:13:89:80:4c:59:0b:
         af:f2:af:af:6e:62:99:12:34:67:4a:cc:8d:f0:6b:bc:88:85:
         b0:31:2c:a5:c1:dd:2b:d4:d0:d8:6f:f5:e5:25:21:d5:79:e7:
         ee:10:65:f4:48:39:3d:52:30:a1:5d:ae:d1:ec:41:dc:b2:43:
         b9:be:e6:25:94:74:7a:68:19:f7:d6:99:6d:aa:15:c7:06:a1:
         97:20:49:9c:d1:bb:b1:f5:04:d7:3b:6e:e6:ca:64:4a:b9:c6:
         03:49:2b:f7:5b:45:1b:76:2e:bc:da:c2:21:55:02:01:1f:ba:
         e1:e3:7a:56:e6:a8:da:df:db:48:18:f9:83:41:6d:50:61:39:
         50:6a:75:8b:74:d6:a5:89:5e:ec:fa:91:72:1f:eb:47:14:37:
         c5:9b:ed:71:10:da:44:b4:07:10:7f:55:56:c2:00:fc:7e:05:
         dd:58:45:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 09:15:36 2024 by rpki-client on console-fra.rpki-client.org